skills/s-hiraoku/codex-harnesses/pr-guardian/Snyk

pr-guardian

Warn

Audited by Snyk on Aug 22, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In SKILL.md steps 4 and 8, the workflow ingests outsider-authored free text from GitHub PR comments and review thread bodies via gh pr view/gh pr checks and extensive GraphQL/REST pagination over reviews, comments, issue comments, and reviewThreads.nodes[].comments.nodes[].body from the target PR.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 22, 2026, 05:38 AM

Issues

1

Security Audit — snyk — pr-guardian